This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A18A0AD65C11F0B3902BE7DAE4EC9C.roa
File:                     95A18A0AD65C11F0B3902BE7DAE4EC9C.roa (raw, json)
Hash identifier:          oY/8nGk7eI3l8HMBhopoAZ13B/YgIPKdekaTuugnLqk=
Subject key identifier:   90:BF:5D:1D:D1:ED:F4:66:1E:3B:FB:02:98:41:69:F9:8E:92:10:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A18A0AD65C11F0B3902BE7DAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 06:42:39 +0000
ROA not before:           Thu 11 Dec 2025 06:42:34 +0000
ROA not after:            Fri 18 Dec 2026 06:42:34 +0000
asID:                     13335
IP address blocks:        45.199.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101814 (0x18db6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 11 06:42:34 2025 GMT
            Not After : Dec 18 06:42:34 2026 GMT
        Subject: CN=693a67df-6d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:bb:43:06:70:41:cf:fa:71:e5:ef:1a:40:
                    8b:50:f3:83:07:73:0a:2b:4a:78:a8:dc:03:95:fd:
                    b5:81:3f:0e:b6:d3:61:cb:4b:95:86:75:9a:32:12:
                    a7:29:cf:bd:40:37:f7:be:eb:2c:98:01:1b:23:ce:
                    e5:85:7b:3a:e0:4e:98:a5:4a:d0:54:64:28:8f:85:
                    77:46:82:a8:c1:b4:b6:e9:85:b2:87:fd:75:1e:90:
                    3d:1d:a1:d3:d1:3f:e4:88:85:95:9a:65:36:18:fb:
                    70:73:21:7c:d6:df:7c:0d:ad:53:1d:32:d7:87:0b:
                    c6:74:11:8a:6b:5b:78:9c:c3:f8:2d:39:f7:f1:27:
                    91:15:dc:e5:ad:72:97:fc:94:81:17:23:81:97:08:
                    b3:2c:0b:5c:db:22:e9:4d:3b:e0:3a:dc:ee:cc:41:
                    a2:e0:be:1f:c1:c8:97:0b:34:ea:74:c6:db:95:7f:
                    78:ec:81:46:8c:b6:81:c0:e8:69:9e:fc:6c:db:cf:
                    fa:06:64:1a:b7:4b:ca:b3:4e:8d:5e:eb:79:62:71:
                    f2:23:45:02:d6:f8:3e:bb:df:99:7b:fa:54:da:ef:
                    fe:3a:b3:5c:f8:73:5c:df:e2:7d:6a:cd:52:11:0b:
                    63:28:67:ff:f2:fc:7d:1e:0d:a5:52:be:60:10:b3:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:5D:1D:D1:ED:F4:66:1E:3B:FB:02:98:41:69:F9:8E:92:10:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A18A0AD65C11F0B3902BE7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:23:f3:b5:67:ca:4f:c9:80:9b:af:49:44:01:f3:b9:6c:
         fa:e6:46:ad:f3:67:79:4b:56:95:b8:29:e5:25:e3:b2:8b:ab:
         73:75:10:07:9c:95:15:ce:91:03:1b:a5:1c:8f:f1:f5:c2:a3:
         72:cb:45:eb:5c:de:0f:3c:05:5d:57:62:be:92:a8:ad:fa:9d:
         65:e2:3c:39:2e:36:64:fc:b2:89:0f:47:57:3c:c9:b6:79:8d:
         9d:db:86:52:1f:70:47:4e:13:a5:da:98:f0:57:9e:33:90:af:
         5d:82:dd:27:a3:0f:d2:b8:50:3e:d5:8f:27:ec:03:2a:79:2f:
         91:f2:71:54:eb:c6:24:fb:50:ad:ad:e0:4d:2c:53:88:62:f2:
         f6:35:37:a3:e5:e1:4b:e5:97:09:43:1b:2e:6e:22:40:41:02:
         67:03:16:72:7e:b2:71:37:84:2d:c0:fc:4a:19:93:5d:d8:f0:
         85:63:00:e5:df:0f:6e:16:29:3c:bc:05:df:bb:30:43:ef:99:
         3a:a4:db:35:9e:a8:fa:05:3f:51:a5:34:78:9b:76:55:e7:30:
         22:b8:2b:32:a8:3f:ee:bf:7c:5c:bc:60:47:50:c6:1b:b9:8d:
         5f:1e:63:ab:3d:4c:f9:11:95:d8:af:d2:8e:e5:ca:a4:ab:d5:
         61:f1:0e:64
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAY22MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjExMDY0MjM0WhcNMjYxMjE4MDY0MjM0WjAYMRYw
FAYDVQQDEw02OTNhNjdkZi02ZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0aO7QwZwQc/6ceXvGkCLUPODB3MKK0p4qNwDlf21gT8OttNhy0uVhnWa
MhKnKc+9QDf3vussmAEbI87lhXs64E6YpUrQVGQoj4V3RoKowbS26YWyh/11HpA9
HaHT0T/kiIWVmmU2GPtwcyF81t98Da1THTLXhwvGdBGKa1t4nMP4LTn38SeRFdzl
rXKX/JSBFyOBlwizLAtc2yLpTTvgOtzuzEGi4L4fwciXCzTqdMbblX947IFGjLaB
wOhpnvxs28/6BmQat0vKs06NXut5YnHyI0UC1vg+u9+Ze/pU2u/+OrNc+HNc3+J9
as1SEQtjKGf/8vx9Hg2lUr5gELP6JQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJC/
XR3R7fRmHjv7AphBafmOkhC4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NUExOEEwQUQ2NUMxMUYwQjM5MDJCRTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce3MA0GCSqGSIb3DQEBCwUA
A4IBAQCa5iPztWfKT8mAm69JRAHzuWz65kat82d5S1aVuCnlJeOyi6tzdRAHnJUV
zpEDG6Ucj/H1wqNyy0XrXN4PPAVdV2K+kqit+p1l4jw5LjZk/LKJD0dXPMm2eY2d
24ZSH3BHThOl2pjwV54zkK9dgt0now/SuFA+1Y8n7AMqeS+R8nFU68Yk+1CtreBN
LFOIYvL2NTej5eFL5ZcJQxsubiJAQQJnAxZyfrJxN4QtwPxKGZNd2PCFYwDl3w9u
Fik8vAXfuzBD75k6pNs1nqj6BT9RpTR4m3ZV5zAiuCsyqD/uv3xcvGBHUMYbuY1f
HmOrPUz5EZXYr9KO5cqkq9Vh8Q5k
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:09 2025 by rpki-client